This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa File: bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa (raw, json) Hash identifier: OnASp4i+IQuMntouuxvgDnRwTu6nI1aFUbYyVa7ImNo= Subject key identifier: FB:07:50:CE:34:A8:EA:E8:AA:E6:CB:EB:A8:41:18:DB:DE:BB:D5:86 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584C61914AAF9882C8712B625640 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 1403 IP address blocks: 67.221.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:4a:af:98:82:c8:71:2b:62:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=d6b0e987-c1e6-4f81-91cb-f3711edadaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:32:3a:03:a7:71:e3:55:8d:bd:72:0e:14: 97:a5:ff:18:de:99:66:8d:4a:5a:2e:f2:ad:9e:0b: 5f:db:a1:7b:1b:64:f5:c1:29:3c:54:2e:30:6b:70: f2:c7:c6:8e:11:22:6a:79:22:e8:eb:3d:1b:bf:6a: 02:44:6c:1d:07:84:ba:f2:e5:d9:be:77:51:3c:ca: b6:1c:1f:51:f5:66:73:7d:17:08:6a:15:22:a3:31: 2b:7c:de:ec:42:a7:9e:14:3c:8f:de:3b:39:e6:52: 16:c6:31:32:bd:12:63:49:6a:69:1c:f7:3c:84:92: 34:7f:5f:ca:f6:ba:8b:7c:a7:64:70:dc:23:eb:d2: 20:1c:57:8e:f1:1c:fc:7e:6a:28:60:f6:e4:f3:6b: 31:fa:9c:92:e3:2e:58:72:e5:6a:6d:9a:d4:ee:68: 4c:d6:6a:83:75:ee:31:3d:9e:d7:f8:55:7f:55:20: 04:ca:dd:72:ba:88:3c:58:d6:1a:8f:dc:2c:a1:29: 80:8f:b6:6e:58:13:09:af:bd:d0:be:0c:2c:66:39: 3f:15:60:0b:0d:d4:d5:ba:3d:d8:5d:00:c1:8f:b7: 2c:40:e8:54:11:23:7b:3d:98:5f:ea:e8:68:15:da: 3c:fb:75:84:a7:8c:6d:f8:49:43:4a:d6:16:8c:95: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:07:50:CE:34:A8:EA:E8:AA:E6:CB:EB:A8:41:18:DB:DE:BB:D5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bd9ca006-1d08-3b42-98a7-cb3b9728ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 67.221.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:03:fd:6a:d1:cb:3e:ea:8b:1a:fb:73:d3:2c:c4:8b:db:e5: 2f:fe:a2:e6:17:64:52:dd:bb:16:92:72:78:de:93:e2:42:b3: dd:29:3e:90:3a:ee:59:ca:05:fb:80:b5:12:ab:6f:99:46:7e: b9:f0:d9:a8:13:e4:a1:3a:54:fe:6d:80:f8:d9:f3:33:4e:5b: 1e:4c:ca:31:1c:d2:fa:ec:d3:ea:4b:a8:61:3d:89:ac:fa:b4: 88:58:c1:4b:3c:b4:d0:bd:de:00:5f:71:5d:54:c9:b7:e6:51: f2:fa:4d:7e:b7:1f:11:a4:72:fa:76:c7:11:d9:8e:d1:c6:d8: ea:e0:db:d8:e2:67:ed:5a:00:09:6a:f3:80:b6:b0:fa:da:02: 21:77:37:2c:01:63:62:3a:bd:d3:8c:b5:d0:69:a9:a7:fc:c0: 37:d1:05:8e:c5:49:d0:f9:a0:eb:6d:df:33:2a:5a:0f:9d:ab: 8b:8a:9c:44:b5:4e:b6:9a:75:81:9d:2f:b4:40:a1:7a:fb:72: 57:9f:05:e8:50:55:c0:70:01:66:39:ee:9b:e8:35:f5:9f:e4: 5d:0d:89:66:02:27:8f:e2:fb:2f:f3:52:a7:c8:75:d2:68:e2: 52:c5:44:92:6b:f4:cb:1f:87:74:c2:f7:72:e0:de:dd:52:2d: 19:47:de:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkUqvmILIcStiVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk ZDZiMGU5ODctYzFlNi00ZjgxLTkxY2ItZjM3MTFlZGFkYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDoyOgOnceNVjb1yDhSXpf8Y3plmjUpaLvKt ngtf26F7G2T1wSk8VC4wa3Dyx8aOESJqeSLo6z0bv2oCRGwdB4S68uXZvndRPMq2 HB9R9WZzfRcIahUiozErfN7sQqeeFDyP3js55lIWxjEyvRJjSWppHPc8hJI0f1/K 9rqLfKdkcNwj69IgHFeO8Rz8fmooYPbk82sx+pyS4y5YcuVqbZrU7mhM1mqDde4x PZ7X+FV/VSAEyt1yuog8WNYaj9wsoSmAj7ZuWBMJr73QvgwsZjk/FWALDdTVuj3Y XQDBj7csQOhUESN7PZhf6uhoFdo8+3WEp4xt+ElDStYWjJVDnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsHUM40qOroqubL66hBGNveu9WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmQ5Y2EwMDYtMWQwOC0z YjQyLTk4YTctY2IzYjk3MjhhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ90wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcD/WrRyz7qixr7c9MsxIvb5S/+ouYXZFLduxaScnjek+JCs90pPpA6 7lnKBfuAtRKrb5lGfrnw2agT5KE6VP5tgPjZ8zNOWx5MyjEc0vrs0+pLqGE9iaz6 tIhYwUs8tNC93gBfcV1UybfmUfL6TX63HxGkcvp2xxHZjtHG2Org29jiZ+1aAAlq 84C2sPraAiF3NywBY2I6vdOMtdBpqaf8wDfRBY7FSdD5oOtt3zMqWg+dq4uKnES1 TraadYGdL7RAoXr7clefBehQVcBwAWY57pvoNfWf5F0NiWYCJ4/i+y/zUqfIddJo 4lLFRJJr9Msfh3TC93Lg3t1SLRlH3lQ= -----END CERTIFICATE-----Generated at Sun Jan 11 04:56:39 2026 by rpki-client